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BACKGROUND OF THE INVENTION 

Field of the Invention 

The present invention generally relates to wireless data communication services. 
It particularly relates to aircraft data communication services. 

Background 

Existing data communication services, particularly for aircraft systems, are 
generally limited by particular (non-public) communication protocols, systems, and 
20 applications. These particular protocols include the Aircraft Communication Addressing 
and Reporting System (ACARS), which is an aircraft communication protocol limited to 
safety and operations data and confined to particular hardware/software systems. 
Another limited, non-public system is the Air Traffic Control Radar Beacon System 
(ATCRBS), which provides surveillance data to air traffic controllers. The particular 
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applications provided by non-public communication systems include ground flight 
recorder development, air traffic control operations, maintenance operations, position 
monitoring (e.g., global position satellite systems - GPS systems), collision avoidance, 
aircraft surveillance, weather radar, in-flight entertainment and other specific 
5 applications. 

Existing data communication services for aircraft passengers are similarly limited 
to particular communication protocols and software/hardware systems, therein limiting 
convenience, affordability, and efficiency. These user communication protocols and 
systems include the Terrestrial Flight Telephone System (TFTS) and other private 

10 communication protocols and systems. These private systems require specialized, high- 
cost antenna equipment and power control systems or an inconvenient, invasive 
passenger ID assignment system to make use of public communication systems such as 
the cellular communication system or the public switched telephone network (PSTN), or 
require high-interference systems such as the existing amplitude modulation (AM) 

15 aircraft communication systems. Based on these existing limitations of non-public 

communication systems, a need exists to enable flexible, seamless data communication 
for aircraft systems using public wireless networks to increase affordability and 
efficiency. 

20 SUMMARY OF THE INVENTION 

The previously mentioned disadvantages are overcome by providing an efficient, 
flexible, and convenient method and system for providing data communication services. 
In accordance with embodiments of the present invention, a data communication server, 
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including a plurality of interface units, facilitates data communication between a moving 
object and one or more ground terminals via a radio communication path. The data 
communication server establishes the radio communication path over one of a plurality of 
wireless data networks including terrestrial and satellite data networks and may include 
an object-oriented software architecture. Additional features of the present invention 
include personal data communication services for users and operational data services for 
the moving object. 

Additional features of the present invention include a system for providing 
communication services including a data communication server, co-located with a 
moving object, for establishing a radio communication path between a moving object and 
a ground station, the data communication server including software architecture including 
software functional layers. 

Further features of the present invention include a method of providing wireless 
data communication services including establishing a radio communication path between 
a moving object and a first ground station using a communication server co-located with 
the moving object, and communicating with a second ground station via the first ground 
station. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram showing a communication system architecture in 
accordance with an embodiment of the present invention. 

Fig. 2 is a block diagram of an alternative communication system architecture in 
accordance with an embodiment of the present invention. 



Fig. 3 is a block diagram showing the data link options in accordance with an 
embodiment of the present invention. 

Fig. 4 is a block diagram showing the data link options via a satellite network in 
accordance with an embodiment of the present invention. 
5 Fig. 5 is a block diagram of a communication system architecture using a satellite 

network in accordance with an embodiment of the present invention. 

Fig. 6 is a block diagram of an alternative communication system architecture 
using a satellite network in accordance with an embodiment of the present invention. 

Fig. 7 is a block diagram of another alternative communication system 
10 architecture in accordance with an embodiment of the present invention. 

Fig. 8 is a block diagram of another alternative communication system 
architecture in accordance with an embodiment of the present invention. 

Fig. 9 is a block diagram of another alternative communication system 
architecture in accordance with an embodiment of the present invention. 
15 Fig. 10 is a block diagram of another alternative communication system 

architecture in accordance with an embodiment of the present invention. 

Fig. 1 1 is a call flow process diagram of a communication system architecture in 
accordance with an embodiment of the present invention. 

Fig. 12 is a block diagram of another alternative communication system 
20 architecture in accordance with an embodiment of the present invention. 

Fig. 13 is a block diagram of the software infrastructure for the data 
communication server in accordance with an embodiment of the present invention. 



Fig. 14 is a software function layer diagram of a communication software 
infrastructure for the data communication server in accordance with an embodiment of 
the present invention. 

Fig. 15 is a block diagram for the service logic architecture of a communication 
5 software infrastructure for the data communication server in accordance with an 
embodiment of the present invention. 

Fig. 16 is a block diagram of an alternative software infrastructure for the data 
communication server in accordance with an embodiment of the present invention. 

Fig. 17 is a security system architecture of a communication system in accordance 
10 with an embodiment of the present invention. 



DETAILED DESCRIPTION 



System Components 

5 FIG. 1 illustrates a representative data communication system architecture 100 in 

accordance with embodiments of the present invention. The system 100 includes an 
aircraft data server 110, cabin distribution system (CDS) 150, and bearer services system 
components 180. The server 110 may be used as the main processor unit that provides 
programmable control over the routing, scheduling, and use of the system 100. 

10 The CDS 150 provides access to the data services provided by the system 100 via 

the server 110. The CDS may include a plurality of components including a Human 
Interface Module (HIM) 155, a Passenger Access Server (PAS) or Terminal Server (TS) 
(not shown), and other components known to those of skill in the art for forming a Cabin 
Communications System (CCS). The HIMs 155 may be laptop computers with 

15 applications for logging data and interfacing with the server for data transfers. The 

PAS/TS, which may advantageously be a part of the server 1 10 or an external device, can 
provide dial-up connectivity to the passenger seats for data service access. 

The bearer services system components 180 can provide the server 110 with the 
data connectivity to a plurality of ground-based servers. The bearer services system 

20 components 180 may include a plurality of components including an Airborne 

Communications Unit (ACU) 205 , a Wireless Gate-link system (WGS) 182, a Satellite 
Data Unit (SDU) 195, and a Terrestrial Flight Telephone system (TFTS) 200. The WGS 
182 maybe, for example, a wireless LAN transceiver (as shown in FIG. 1) based on the 
IEEE 802.1 1 specifications which can allow transfer of high-speed data to the server 1 10 



in the airport when the aircraft (moving object) is on the ground. The ACU may act as 
the gateway to a ground-based data center via the North American Terrestrial System 
(NATS) network. Although the present invention is described with reference to the 
NATS network, the NATS network is solely exemplary and alternative communication 
5 networks may be used for providing air-to-ground data communication services. 

The SDU may provide access a Satellite Communications (S ATCOM) Satellite 
Bearer Service, The TFTS is used to access the European land-line telephone network. 

System 100 may include a plurality of components to provide higher data 
bandwidth and passenger access technology for facilitating data applications, examples 
10 being Internet Web browsing and email retrieval These components include Direct 
Broadcast Service (DBS) satellite decoder 152, passenger cabin dial-up access system 
151, and the WGS 182. Other components of system 100 can help facilitate data 
communications over the existing NATS data network. 

The server 110 may include a CPU (not shown) comprising, for example, an Intel 
15 Pentium Pro, or equivalent processor system. The CPU provides multiple functions 

including, for example, interfacing various applications for data storage and retrieval, and 
managing various data communications interfaces for data transfer to the ground-based 
servers. 

The server 110 may include a plurality of interface units for interconnecting to 
20 various data networks. These interface units may comprise a plurality of discrete I/O 
boards or a single integrated board. Alternatively, the server 110 may include 
commercial off-the-shelf (COTS) network cards to provide data communications services 
for the system 100. 
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The plurality of interface (I/O) units may include an Ethernet interface unit 115, 
modem 120, communications (COM) port 135, Integrated Services Digital Network 
(ISDN) Basic Rate Interface (BRI) port 130, Primary Rate Interface (PRI) port 125, 
ARINC-429 (Aeronautical Radio, Inc.) bus interface unit 145, and ARINC-573 bus 

5 interface unit 140. The Ethernet unit 115 may include ports for interconnection to the 
HMs 155 and to the external terminal station (TS), and may be used to connect to the 
wireless local area network (LAN) transceiver 182 providing a high-speed data path to 
ground terminals while the aircraft (moving object) is on the ground. Alternatively, a 
COTS Ethernet card attaching to an external hub (not shown) may be used. 

10 The modem 120 and COM port 135 are used to enable the server 1 10 to provide 

dial-up connection to the ground-based servers via the NATS network. Additionally, in 
the packet data mode for system 100, the COM port 135 can be used to connect the server 
1 10 to the ACU 205 directly. 

The PRI port 125 and BRI port 130 allow users (passengers) to establish dial-up 

15 internet protocol (IP) connections, via the CDS 150, when the system 100 offers Web 
browsing, email retrieval, and other passenger-related data services. The BRI port 130 
may also be used as one of the system 100 link options when operated in the packet data 
mode. This mode is entered when a call is established between the server 110 and the 
ACU 205, and the bearer channel (B-channel) is operated in 64-Kbps unrestricted mode. 

20 Once the call setup is completed, data is transferred without alteration allowing data-link 
protocols, an example being Point-to-Point Protocol (PPP, RFC- 1548), to be used to 
encapsulate the IP packets sent to and from the ACU. This mode may also be referred to 
as the transparent bearer service. 
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The ARINC-429 bus interface 145 can be used by the server 1 10 to receive data 
from a plurality of on-board management systems and to allow access to an additional 
bearer service via the existing Aircraft Communications Addressing and Reporting 
System (ACARS) messaging capabilities or Satellite Data Unit (SDU) if so chosen. The 

5 server 1 10 can also receive data transmitted from the ground via ACARS using the 
interface 145. Advantageously, the interface 145 has at least one transmit port to 
interface with an ACARS mobile unit (MU) 210 and at least two receive ports, one to 
receive management data from the Aircraft Condition Monitoring Systems (ACMS) and 
one to receive data from the ACARS. Additional receiving ports can be added as need to 

10 provide further management applications to monitor data from on-board sensors via the 
ARINC-429 bus interface 145. 

Additionally, the system 100 may include a digital satellite system (DSS) 
interface unit (not shown) to provide broadband packet data service at faster rates than an 
Tl/El rate. The broadband data service can use a Direct Broadcast Satellite (DBS) to 

15 transmit and receive packet data, including a DSS channel coding scheme, quadrature 
phase shift keying (QPSK) modulation and R-S forward error correction, MPEG-2 
technology for compressing and transporting (data link layer) the digital video data, and 
low-profile antenna and DSS decoder PC board/box to receive and decode the DSS 
signal Other broadband methodologies may include, but are not limited to MPEG-4 (e.g, 

20 EL263, H.261) and other compression techniques including compression techniques that 
are standards compliant or proprietary. 

The ACU 205 enables air-to-ground communication using the existing NATS 
network. Advantageously, two types of ACU can be used based on the type of interface 
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to the CDS 150, examples being a type 496 and a type 4300/8600. Type 496 has 12 
ISDN BRI ports that support direct interface to BRI handsets, and type 4300/8600 
interfaces to the CDS 150 by connecting to the Cabin Telecommunications Unit (CTU) 
161 via ISDN PRI port 125. The data link to the ACU 205 may be via one of the B 

5 channels on the same PRI that carries voice traffic to the ACU 205 requiring the server 
110 to request a B-channel call to the ACU 205 via the CTU 161. 

Both types of ACU can include a baseband unit (BBU), radio frequency unit 
(RFU), and a power supply unit (PSU). The BBU advantageously controls the data link 
connection from the aircraft to the nearest ground station. Both types of ACU will accept 

10 two different data link connection types from the server. In the non-packet data mode, an 
asynchronous (Async) voice-grade modem dial-up via a B-channel ISDN link using a 
data access unit (DAU) 202 can be used. In the packet data mode, a transparent B- 
channel data link can be used. 

In the non-packet data mode, the link operates with the BBU having an internal 

15 modem to provide V.32/V.22 capability interfacing with the modem on the server 110. 
In the packet data mode, the server 110 can first encapsulate the TP packet in a PPP data 
frame and send it to the BBU using the clear B channel data service. Once the BBU 
receives the PPP frame, the BBU will strip off the PPP header from the PPP packet, and 
repackage the remaining IP packets into the radio (RF) framing structure. The server 110 

20 then modulates the data with phase shift keying (PSK) and up-converts the signal to radio 
frequency for the RFU to transmit to the ground. The RFU provides needed signal 
amplification for transmitted and received signals, and the PSU provides direct current 
(DC) power derived from the aircraft (moving object) power source. 
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The Human Interface Modules (HIMs) 155 can be laptop PCs, for example, used 
by crew and operational personnel as the gateway to the system applications via a 
standard graphical user interface (GUI). HIMs 1 55 can be housed, for example, in an 
adapter shell that allows connection to a common docking station, the adapter shell 
5 providing the interface between the HIM 1 55 and the docking station and equipped with 
an Ethernet interface to connect to the server 1 10. 

System Data Link Interface Options 

The communication system, including server 1 10, has access to ground-based 

10 data servers via several data bearer services as illustrated in FIG. 2. These data bearer 
services can include wireless LAN services 250, NATS packet or voice-band data 
services 255, satellite data services 265, terrestrial flight telephone services (TFTS) 270, 
and direct satellite system services (DSS) 275. 

FIG. 3 illustrates the data link options for the server and for the ground-based 

15 customer premises equipment (CPE) using the NATS network. Advantageously, there 
are three data link options for the server 325 to connect to the ACU for providing data 
communication services to the ground. The first option is establishing a point-to-point 
protocol (PPP) connection 310 between the server 325 and the CPE 492 via a voice-grade 
dial-up over the existing NATS voice network. Other components of the data link may 

20 include a data access unit (DAU) 340, ACU 370, ground station 400, public switched 
telephone network (PSTN) 430, 480, and ground data gateway (GDG) 465. The system 
can use PPP as the end-to-end link layer protocol as if a direct connection exists between 
the server and the CPE. 



11 



The other two options operate in the packet data mode. A regular traffic channel 
of the NATS network will be used to carry the packetized data and a circuit switch call is 
performed to maintain the channel for the duration of the packet transfer. The first packet 
mode option 310 uses the ISDN BRI interface unit of the server 325 by connecting the 

5 server 325 to the type 496-BBU, part of ACU 370, via the BRI line. To establish a radio 
communication path, the server 325 can send a call setup request message to the 496- 
BBU, and the 496-BBU can request the ground station for a traffic channel before the 
496-BBU establishes the call with the server 325. After a channel is allocated, the 496- 
BBU returns a call-establish-message back to the server 325, and an end-to-end ISDN 

10 data call is established between the server 325 and the 496-BBU. Subsequently, IP 

packets are transferred using the B channel by encapsulating them inside the PPP frame. 

The second packet data option 305 uses ACU 370 of type 4300/8600. In this 
option, the server 325 is connected to the 4300/8600-BBU via the CTU 350 using the 
ISDN El PRI link. The call setup then follows a similar scenario as to the first packet 

15 data option that used BRI except that the CTU 350 is used to establish the call to the 
BBU, part of ACU 370, over one of the B-channels. At the BBU, IP data packets are 
channel encoded and encapsulated in radio frequency (RF) data frames. Subsequently, 
the data packets are modulated onto a radio frequency and sent to the Ground Station 
(GS) 400. At the GS 400, the data packets are sent along to the Ground Data Gateway 

20 (GDG) 465 via a Frame Relay (FR) network. The GDG 465 advantageously transfers the 
IP packets to different networks by proper protocol conversions, and receives all ground- 
to-air packet data call requests, sending them to the destination air terminal via an 
associated GS where a radio link is established by the air terminal 
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Additionally, an alternative system architecture 330 can be used for a packet data 
mode allowing aggregation of multiple radio links to provide higher data throughput. 
This higher data rate can be achieved by tunneling the PPP frame from the server 325 to 
GDG 465 via a Layer Two Tunneling Protocol (L2TP). L2TP tunneling allows the PPP 

5 session to be initiated by the server 325 and terminated at the GDG 465, not the BBU 
(part of ACU 370), allowing the server 325 and GDG 465 to establish multiple PPP 
sessions over multiple radio links. The GDG 465 enables the server 325 to negotiate a 
PPP Multilink Protocol (MP) with GDG to bundle all the PPP sessions together to form a 
higher bandwidth virtual pipe. 

10 Also, during operation, the radio communication path between the server 325 and 

the GDG 456 may be shared by voice and data traffic where the data traffic is interleaved 
over the voice traffic and inserted, via data frames, into existing voice traffic channels 
when silence is detected on the existing voice traffic channels. 

Tunneling (L2TP) provides a number of unique advantages for the system. These 

15 advantages include using the existing infrastructure to make the addition of server data 
communication services transparent to the existing Air-Ground network until the IP 
packet arrives at the GDG. Further advantages include the following: 1) lower 
development costs because development is only needed at the two ends, server and GDG, 
and the existing serial line internet protocol (SLIP ) on the BBU can be used for 

20 delivering L2TP packets; 2) allowing single point of processing for IP address 
assignment and packet filtering because only the GDG will be used to maintain 
databases; 3) allowing end-to-end recovery and flow control which therefore removes the 
need for the BBU to perform buffering and link layer maintenance; 4) allowing 
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aggregation of multiple radio links to increase throughput using MP; 5) allowing future 
development of new PPP extensions without requiring changes to the BBU/GS because 
the radio network just passes the packets through the GS; 6) enabling tunneling interfaces 
with other bearer services, allowing all communications to occur between the server and 
5 the GDG independent of the bearer service selected. 

For the CPE 492, three data link options can be selected depending on the type of 
data mode to be used. For a voice-grade data link, the CPE 492 can interface to the 
system via a V-series modem connected to a two-wire analog line from the LEC (local 
exchange carrier). For packet data mode, the CPE 492 has two options. For a first packet 
10 data mode option, the CPE 492 can use a frame relay service if the CPE is part of an 

already existing frame network. Advantageously, a permanent virtual circuit (PVC) from 
each GS to a NATS data gateway over the existing frame network can be established to 
deliver IP packets from the aircraft (moving object). The CPE can act as a router 
connecting to the system with the server behind it, or alternatively the server can 
15 terminate the frame relay service and IP is transmitted over the link. For the second 

packet data mode option which provides lower costs, ISDN BRI service is obtained from 
the local exchange carrier (LEC). When IP packets are destined to the CPE, the GDG 
will set up the data link dynamically by calling to the CPE using PPP for IP 
encapsulation. 

20 An alternative bearer service used by the system can be a satellite communication 

service. One example can be the INMARSAT DAT A3 services which provides an X.25 
service with maximal data throughput (e.g., 10.5 Kbps) and is accessible through the 
SDU 195. FIG. 4 shows the connection options 500 for connecting the server to the 
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SDU. Two options 510, 520 may use an ISDN D-channel to establish the X.25 SVC 
(switched virtual circuit) and transport the X.25 data packets. An alternative option 530 
can use the high-speed ARINC-429 port 145 to interface directly with the SDU for X.25 
call setup and data transport. 
5 Other alternative bearer services can be used including broadband satellite link 

services - for example, a DBS system. A suitable digital compression system, for 
example a Moving Picture Expert Group (MPEG-2) system, can be used to multiplex any 
digital signals with digitized video signals, including any packet data, on to one, or to a 
very small number of satellite transponders. Other compression methodologies may 
10 include, but are not limited to MPEG-4 (e.g, H.263, H.261) and other compression 

techniques including compression techniques that are standards compliant or proprietary. 

Use of aDSS system/interface unit allows for broadband communication 
independent of the particular link content, either a compressed video signal or a sequence 
of IP packets which can be deciphered by a video coding device at the GS and the DSS 
15 receiver on the aircraft. Passenger and cabin applications for this broadband satellite 
service include, but are not limited to, software downloading, flight information updates, 
Internet browsing, and TV/video delivery. 

FIG. 5 shows the architecture 600 of a satellite data communication service using 
DSS technology. The system architecture includes aircraft system 610 having server 615 
20 and CTU 612 for facilitating a communications link to a DBS data center 630, via a DBS 
Satellite 618, and NATS network 620 interconnected to internet facilities 640 and CPE 
650. DBS data center 630 includes router 638, satellite access management system 637, 
DSS encoder 636, and radio equipment including combiner/uplink 635. The system 
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architecture 600 further includes on the aircraft a DSS receiver/decoder and antenna (not 
shown) to help facilitate the broadband service. 

The system architecture 600, using asymmetrical data transport, can provide large 
bandwidth (e.g., in excess of 5 Mbps) from the network (DSS, upstream) to the aircraft 

5 and from the aircraft to the network (e.g., 4.8-9.6 Kbps) (NATS, downstream). A large 
bandwidth for the upstream can be useful for web applications since most Internet 
browsing retrieves a much greater amount of information than is initially transmitted. 

Alternatively, other satellite bearer services can be used to deliver data 
communication services, for example, LEO/MEO/GEO (low earth orbiting/middle earth 

10 orbiting/geosynchronous earth orbiting) satellite systems. Specific commercial examples 
of suitable LEO/MEO/GEO systems include, but are not limited to Iridium, Globalstar, 
ICO, Odyssey, Millennium, Space, Astrolink, Cyberstar, and Teledesic. Use of these 
systems enables data service offerings in the exemplary range of 384 Kbps - 1.2 Gbps, 
and allows various data applications including video conferencing, high-quality video, 

1 5 high-speed Internet, and virtual LAN service. 

FIG. 6 shows a representative example of a data communication system 
architecture 605 using a LEO/MEO/GEO satellite network. The system architecture 605 
includes aircraft 610 having CTU 612 and server 615, with a data communication link to 
satellite network 685 and ground networks 695 via satellites 680, 690. The ground 

20 networks 695 can advantageously include GDG 694, video conference facility 691 , VPN 
(virtual private network) 693, Internet facilities 640, and web server 692. The aircraft 
610 acts as one of the ground-based clients receiving and transmitting high speed data via 
the satellites 680, 690. The system 605 is a two-way system which alleviates the need to 
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use the NATS network for a return path, and allows the server 615 to treat the satellite 
link as just another two-way bearer service by using the satellite broadband network 685 
to interconnect the aircraft 610 and the ground networks 695 via a mobile terminal (MT) 
(not shown) connecting to the GDG 694. 

5 The satellite network 685 can perform necessary routing and handoff procedures 

to establish and maintain connectivity between the aircraft 610 and ground networks 695. 
Additionally, the satellite network 685 can serve as a network cloud providing 
connectivity between any pair of clients (e.g., aircraft 610 and ground networks 695) 
preferably using SVCs or PVCs. 

10 The aircraft 610 includes a satellite transceiver unit capable of transmitting and 

receiving data using any particular satellite network, and having the capability of 
handling either ATM or frame relay protocol such that a SVC or PVC can be established 
between the aircraft transceiver box and ground networks 695. Using this setup, EP 
packets can be encapsulated by these lower layer protocols to enable a transparent 

15 conduit for IP packets to travel from the aircraft to the desired ground networks 695. 

Another alternative data link option enables passenger cabin dial-up access 
services. FIG. 7 shows the communication system architecture 148 for passenger cabin 
dial-up services. The system architecture 148 includes cabin distribution system 150, 
server 110 having its components, and can further include digital flight data acquisition 

20 unit (DFDAU) 710, ACARS MU 750, and other components. 

The system 148 allows a user (passenger) to access internet service, either via an 
on-board internet service or using the server as a proxy to access the rest of the Internet. 
At least two types of access are available depending on the configuration of the user's 
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access device (e.g., laptop). For all access scenarios, the connection to the server 1 10 via 
the TS function will be over a CTU-switched ISDN B-Channel. Advantageously, the 
user's access device can be equipped with a PCMCIA V-series modem allowing 
connection to an RJ-1 1 jack on the handset, and the handset can be connected to the CTU 

5 1 52 via the CDS network. For this configuration, a modem pool, as part of the TS 
function, can peer with the laptop modem, and the link layer protocol is PPP so that 
proper authentication (for billing purposes) and dynamic IP address assignment can be 
achieved. Advantageously, a useful COTS TS for serving this function includes, but is 
not limited to, the Ascend MAX or US Robotics Total Control that, on one end, can 

10 interface with the CTU via a Tl/El PRI or with the BBU via a BRI and, on the other end, 
with the server via Ethernet (see FIG. 1) 

Alternatively, the user's access device can be equipped with an ISDN modem, 
alleviating the need for the server 1 10 to have modem capability. In this configuration, 
an internal COTS PRI PC card can be used for handling the end-to-end digital signal. 

15 Advantageously, this particular configuration imposes no additional development on the 
aircraft end, only requiring modification on the handset to provide a U-interface for 
connecting to the user access device ISDN modem. 
Networking 

FIG. 8 shows a more detailed illustration of the server data link option to the 
20 ground using the existing voice-grade NATS network. This system architecture 900 
includes access device (e.g., laptop) 910, server 920, DAU 925, BBU 930, modem 937, 
and RFU 935 as part of the air portion of the architecture 900, and RFU 940, BBU 945, 



modem 955, switching center 950, PSTN 960, and terminal server (TS) 965 as part of the 
ground portion of the architecture 900. 

As described previously, a point-to-point link can be established between the 
aircraft and remote server using the PPP link layer protocol to encapsulate IP for transfer 

5 across this virtual connection. The data link can be established in three stages, using an 
air-to-ground link request, ground-to-ground call setup, and end-to-end call setup. 

Advantageously, the air-to-ground link can be first requested using a FAX/DATA 
channel request signal via the DAU 925 to the BBU 930. BBU 930 can determine which 
ground station to use and can then send a request channel signal, via RFU 935, to the 

10 ground station (GS) selected. Once the selected GS finds an available channel, the GS 
sends a request to the switching center (SC) 950, receives an acknowledgment, and then 
returns the acknowledgment with the assigned channel to BBU 930, via BBU 945 and 
RFU 940. After receiving the acknowledgment signal, BBU 930 sends a signal to server 
920 via DAU 925 indicating that a channel is being made available. Upon completion of 

15 this air-to-ground link request (channel availability), the voice path can be established 
between the server 920 and the SC 950, and the SC 950 inserts an in-band dial-tone and 
waits for the server 920 to out-pulse in-band DTMF digits to complete the ground portion 
of the call connection. 

Once the air-to-ground call setup is completed, the ground-to-ground call setup 

20 can then proceed. Once the server 920 receives the "dial-now" signal, it then out-pulses 
the 10-digit phone number to the SC. The SC then connects to the destination number 
via the PSTN and bridges the two conference legs together. At this point, the SC returns 
the call progress tone all the way back to the server 920. Upon answering the call, the 
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remote TS 965, either at the GDG or the CPE ? sends the in-band modem answer tone, via 
modem 955, to start the modem negotiation with the calling party, via modem 937. Once 
the GS detects the modem tone, it cuts the voice path, and sends a signal to the BBU 945 
to request it to start modem training with the server 920. At the same time, the GS starts 

5 the modem training with the TS 965. When both pairs of modems 937, 955 complete the 
training, the data can flow through the air link using a particular out-of-band protocol 
while the data flowing between the two pairs of modems can use a V-series protocol. 

Once the setup of the physical layer between the server 920 and TS 965 is 
completed, the TS 965 can start the link layer negotiation with the server using the PPP 

10 protocol in accordance with RFC 1548, 1549 including the three main components of 

PPP: LCP (Link Control Protocol), NCP (Network Control Protocol), and multi-protocol 
encapsulation. PPP encapsulation frames can be used to carry the IP traffic across the 
data link between the two PPP peers, the server 920 and the TS 965 of the ground 
network. Advantageously, the server 920 may act as a proxy server or perform network 

15 address translation for any clients on the same LAN. 

FIG. 9 shows a more detailed illustration for the packet data connections using the 
NATS network. The link architecture 1000 includes server 1005, CTU 1008, ACU 1010, 
GS 101 5, GDG 1020, and CPE 1025. Different data link protocols can be followed over 
different link segments. Advantageously, a call scenario can start when the server 1005 

20 needs to establish a data link to the ground IP network. When the BRI is used, the server 
will send out a call setup request via the D channel to the BBU with data call indication. 
The BBU will then request a traffic channel from the GS 1015 for data use. Once the GS 
allocates a channel and acknowledges the BBU, the BBU will send back the call 
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connected Q931 message back to the server 1005 and allocate the B channel for such use. 
All subsequent IP data will go over this clear B channel using PPP to frame the IP 
packets. 

Alternatively, if the ISDN PRI is used instead for call setup, the call request can 

5 be initiated when the server sends a call setup message to the CTU 1008 as described 
previously. CTU 1008, based on the destination number of the call setup message, will 
send an incoming data call indication to the BBU. Once the BBU detects the incoming 
call event, it will proceed and negotiate a traffic channel as described previously. Once 
the channel is allocated, the BBU will send back call answer messages to the CTU to 

10 inform the server 1005 that a data link is up and it is ready to receive any PPP packets. 
Once the PPP packet arrives at the BBU, the BBU will strip off the PPP header from the 
PPP packet, put the remaining PPP packets into RF frames, and transmit the channel- 
encoded RF frames over the radio link to the GS 1015. 

Once the GS 1015 receives the radio frame, it will recover the IP packet and 

15 forward it to the GDG 1020, advantageously serving as a router and interface to the 
public Internet and to the private network that interconnects the CPE servers such that 
every IP packet will be routed to the appropriate network based on the destination IP 
address. For ground-to-air packet data calls, the GDG will send call request messages to 
the associated GS for certain destination air terminals via a frame relay network. When a 

20 radio link is available, a connection will be set up from GDG to server (using circuit 
mode from GS to server). 
Mobility Handling - Air Terminal Tracking 



The system can use mobility handling procedures to track locations of Air 
Terminals/ ACU in real time to facilitate proper handoffs for both the air-to-ground 
(ATG) and ground-to-air (GTA) packet data calls. Handoffs can occur across the link 
when the aircraft (moving object) travels from one GS coverage area to another, 

5 necessitating the selection of an alternative GS to handle the radio link for the aircraft. 
Also, the GDG, handling IP packets destined to the aircraft, is informed of the new GS 
handling the radio link with the aircraft. 

Handoffs can be initiated due to a plurality of air link conditions. These 
conditions can include, but are not limited to, pre-determined distance, call times, pilot 

10 distance, time, and bit-error-rate (BER) thresholds being satisfied. These conditions may 
be further defined as initiating a hand-off in response to one of the following: when pre- 
determined distance and call time thresholds are satisfied, when pre-determined distance 
and error rate thresholds are satisfied, when pre-determined first distance, second 
distance, and call time thresholds are satisfied, and when pre-determined call time, error 

15 rate, and distance thresholds are satisfied. 

To facilitate handoff management, the network used for the radio link (an 
example being the NATS data network) assigns an IP address for each network element. 
These network elements can include, but are not limited to, ground station management 
(GSM), ground station controller (GSC), channel thread, switching center (SC), and 

20 operating center (OC). IP addresses for air terminals can be assigned dynamically by the 
channel threads when the AT connects with the GS. When handoff happens, a different 
channel thread from another GS will be used for the same call; therefore the AT will get a 
different IP address. 



For a packet data call, the IP address of the server is unique and static during the 
flight. An IP address is assigned to the server dynamically by the GDG when the flight 
starts and a first packet data call is requested. Thereafter, the same IP address may be 
used throughout the entire flight and is freed up when the flight ends. The termination of 
5 an active flight, activating the release of the IP address, may be triggered by a time-out 
based on the predetermined flight time or by a message initiated from the ADS to the 
GDG. Advantageously, a separate pool of IP addresses, distinct from those currently 
being used, is obtained for the packet data service. 

Additionally, the GDG maintains necessary database tables to perform the 
ffl 10 mobility handling, examples being an IP address assignment table and an AT location 
l 5 table. The IP address table can include the AT identifications and the IP address of the 
s 1 current packet data calls. The AT location table can contain the AT ID and the associated 

7 GS and channel threads. Both tables are maintained and dynamically updated by the 

y 1 system. When returning packets are received at the GDG for a certain IP address, the 

L ll 15 GDG gets the AT ID from the IP address, and finds the AT's current location using the 
^ AT location table, inserting the AT ID into the returning packets and sending them to the 

associated GS. 

Circuit Mode Data in the Packet Data Network 

The packet data architecture described herein can be used for an improved circuit 
20 mode data solution (non-CTU installation). The circuit mode data system architecture 
1 100 is shown in FIG. 10. The system architecture 1 100 includes user access device 
(e.g., laptop) 1105, telephone 1110, ACU 1115, TS 1125, antenna 1120, radio tower 
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1135, server 1130, ground station controller (GSC) 1 140, router 1145, frame relay 1150, 
router 1155, GDG 1160, modem pool 1156, PSTN 1170, and destination modem 1175. 

FIG. 1 1 illustrates the call flow procedures 1200 for the circuit mode data solution 
for the packet data network. In accordance with embodiments of the present invention, 

5 the circuit mode data solution can use a TCP/IP interface to be constructed between the 
server and the GDG. The call flow 1200 includes a plurality of components including 
user access device (e.g., handset) 1205, TS 1210, server 1215, BBU 1220, GSC 1225, 
GDG 1230, and remote end device 1235. 

Upon user request from the user access device 1205, the BBU 1220 can check to 

10 verify that adequate radio and server resources are available. Assuming adequate 

resources are available, the BBU 1220 will then proceed to reserve a modem on the TS 
1210 and establish a link to the GSC 1225. Once the link to the ground is established, an 
end-to-end TCP circuit is setup between the appropriate GDG 1230 and TS 1210 
components, advantageously performed using telnet or a socket connection between the 

15 two components. The BBU 1220 also forwards dialing and dialed numbers to the GDG 
1230. Pending a sanity check on the dialed number and a validation check on the billing 
instrument, the GDG 1230 will initiate a connection to the desired destination party via a 
modem. Simultaneously, the BBU 1220 will transfer the call to the TS 1210 voice-band- 
data BRI interface with both modem connections (i.e., passenger to TS 1210 and GDG 

20 1230 to remote end device) negotiating the link separately. Upon confirmation that these 
two links have been established, the GDG 1230 and TS 1210 can shuttle information to 
each other. Additionally, this configuration can support handoffs of voice-band-data 
calls. 
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Server Air Terminal 

The Air Terminal (AT), including the BBU, can provide a plurality of packet 
handling services. These services can include an AT/GS radio data bridge providing a 
data link layer with end-to-end error correction and with end-to-end packet sequencing. 
Additional services include any combination of half-rate and full-rate channels for the 
packet data service. 

FIG. 12 illustrates the communication architecture 1900 for providing the radio 
data bridge between AT and GS, preferably forming a low error rate "bit-pipe" for 
communication between the AT and GS. The components of the system include server 
1905, BBU 1910, GS 1920, and GDG 1930. An optional component includes frame 
relay network 1925. A plurality of call control features maybe provided by the AT 
including Packet Data Seizure Override, Established Packet Data Link Override, Hand- 
off, and Override Hand-off. Preferably, the BBU 1910 may override a packet data 
seizure should it be determined that a higher priority ATG voice call must be serviced. 
For this event, the BBU 1910 uses the packet data priority negotiated at the establishment 
of the packet data link to determine whether override is allowed, and the AT notifies the 
data communication server 1905 of the seizure override via an appropriate protocol 
message (e.g., LAPD). 

Additionally, the BBU 1910 may override an established packet data link should 
it be determined that a higher priority request must be serviced (e.g., ATG or GTA voice 
calls). Again, the BBU 1910 uses the packet data priority negotiated at the establishment 
of the packet data link to determine whether override is allowed, and the AT notifies the 



data communication server of the link override via an appropriate protocol message (e.g., 
LAPD). 

For hand-offs, the AT preferably notifies the data communication server 1905 of 
an impending hand-off using an appropriate protocol message (e.g., LAPD). The server 

5 1905 may then accept or delay the hand-off, wherein for either case the server 1905 
signals the BBU 1910 using an appropriate protocol message. 

For Override Hand-off, in conditions where a packet data call and a voice call are 
active, the AT may determine that it is necessary to hand-off the voice call To perform 
this override, the AT places the packet data call in a suspended mode to facilitate a voice 

10 call hitless hand-off, wherein the packet data link is reestablished through a newly 

selected GS. As with normal hand-offs, the BBU 1910 notifies the server of the pending 
hand-off using a protocol message, and the server 1905 may accept or delay the hand-off, 
wherein for either case the server 1905 sends the appropriate protocol message to the 
BBU 1910. 

15 Server Software Architecture 

As illustrated in FIG. 13, the server of the data communication system can 
advantageously include an object-oriented software architecture 1400. Software 
architecture 1400 includes server 1410, GDG 1430, and ground-based servers 1440. An 
object-oriented software architecture is exemplary and alternative software architectures 

20 may be used including, but not limited to, C++, JAVA, HTML, etc. 

Use of an object-oriented design includes that each system resource or service 
provider bears an object entity, and that services are accessible via the published 
methods. Resources are managed within the objects. Additionally, the server 1410 may 
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advantageously use a client-server model wherein the clients request the service by 
accessing the published methods or interfaces on the servers 1440. The software 
architecture also advantageously may use location transparency wherein the objects are 
accessible by the clients universally within the confines of the access control and the 

5 network connectivity. 

As shown in FIG. 13, the software architecture 1400 may optionally include GUI 
(Graphical User Interface) 1420 having interfaces allowing data communication 
applications to request services from the server 1410. Preferably, objects on server 1410 
can advertise services that applications are allowed to access, the applications also 

10 accessing a Structured Query Language (SQL) manager as needed to interact with the 
GDG 1430 to retrieve or send data. The GDG 1430 may serve as a Data Proxy, using 
local storage space to either cache the data for upload to the server 1410 or download to 
the customers' (user) ground-based servers (GBS) 1440. GDG 1430 will then use the 
proper transport to interact with the GBS 1440 for data transfer. The GUI 1420 can be 

15 optional to the design as applications may run unattended without human intervention 
and therefore are only used for maintenance operations under those conditions. The 
design of the architecture 1400 is independent of the underlying operating system. 

The software architecture can be logically divided into four functional layers 1500 
as shown in FIG. 14. These layers include an applications (AP) layer 1505, application 

20 programming interface (API) layer 1510, system services (SS) layer 1515, and system 
resources (SR) layer 1520. The AP layer can contain applications that are developed by 
the aircraft or other parties. The SR layer contains the system resources that are used by 
the SS layer when providing service to higher-layer components. The SR components 
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can include the server bearer resources, the databases, the data storage, and JAVA 
execution environment, etc. 

The SS layer components provide system-level services to the objects in the API 
layer or to other components in the same layer. The services can include, but are not 

5 limited to, various TCP/IP services, avionics standards services, data compression and 
cryptographic services, scheduling, and transaction-oriented services. The SS layer 
includes API administration SS to manage all API objects, its purpose being to provide 
access control, service activation/deactivation, and property change capabilities of the 
API object to the data communication service provider. 

10 Advantageously, the SR layer may include at least four types of components used 

by the data communication server. These components can include device drivers, BITE 
system, file system, and miscellaneous facilities. Dependent on the underlying OS of the 
data communication server, the components of the SR layer may be part of the embedded 
OS or may be specially designed for aircraft data communication services. 

15 Device drive (DD) components enable the SS layer components to interact with 

communication devices for data exchange with the GDG or with onboard avionics 
devices. Advantageously, the DD may be part of the underlying OS or may be specially 
developed, and includes a plurality of components including a BRI driver, PRI driver, 
Ethernet driver, ARINC-429 driver, and ARJNC-573 driver. 

20 The SR file system can advantageously provide a consistent way to store (or 

provide permanent storage - persistence) the data including allowing the SS components 
to perform read, write, and delete operations based on particularly developed user rights 
or permissions. Additionally, the file system can include a special system file, the route 
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table, used for determining the routing for IP packets. The route table can include a set of 
known routes and be locally stored in non- volatile memory. 

Miscellaneous facilities can include an SQL database and a JAVA Virtual 
Machine (VM). The SQL database provides a database engine to store and manage the 

5 data needed by the server SS and API components, including all necessary database 
transactions such as query, insert, update, and delete functions. Advantageously, the 
JAVA VM can allow the server to access other network-based services using JAVA 
applications or applets. Use of the VM allows the server to write an API using JAVA 
architecture that allows clients from other platforms running a different OS to request 

10 services from the data communication server with a standardized protocol. 

The API layer provides a consistent way for the AP to acquire and utilize data- 
oriented aircraft services. Advantageously, a generic object is produced, an example 
being the generic business object (BO), that will allow access to these services assuming 
specific transport protocols (e.g., TCP/IP, UDP, etc.). This allows use of an object 

15 without specific knowledge of the service support structure. Alternatively, each 

component in the API layer can be represented as an object that provides one specific 
aircraft service, each object containing three major parts - the communicator, the 
receptor, and the service logic. Services provided by each API object can be 
characterized by properties, methods, and events and are exposed through the 

20 communicator and the receptor. 

The communicator is a client-side component which can be represented as a 
control in a user object (UO), or the object embedded in AP, which enables the AP to 
invoke services and to communicate or share the data construct with the object via a 
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known set of properties, methods, and events. The receptor component which can be 
represented as a control in the business object and which resides inside the object itself, is 
used to accept the service requests and to share and communicate back with the AP. The 
service logic is the implementation of the object itself and has access to the lower-layer 

5 components. This architecture is illustrated in FIG. 15 and comprises the client process 
1605 and the local server process 1618. Client process 1605 includes client application 
1610 and user object 1615, and local server process 1618 includes business object 1620 
and local server 1625. 

Other API objects can include the FMS (Flight Management System) object for 

10 database loading, the FOQA (Flight Operations Quality Assurance) object for obtaining 
and managing ACMS data, and other objects. 

In practical operation, the communicator can provide the clients the necessary 
networking and protocol handling capability to execute services on the server, and the 
receptor handles the requests initiated by the clients and starts "Instances" of the services 

15 being requested. Following this process, the communicator of the API allows the 
applications to make use of the services provided by the server. Similarly, the 
communicator of the SS object allows other SS and API components to utilize the 
services provided by the SS object. FIG. 16 illustrates an exemplary configuration for the 
software architecture 1800 for an end-to-end system between the cockpit and cabin 

20 terminals 1870, airborne data server 1875, and ground data gateway 1880. 

Network Security 
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Network security is an important feature of the data communication server. As 
shown in FIG. 17, the system security architecture 1300 may include a plurality of access 
nodes 1305 interconnected to a plurality of data communication servers 1310, and a 
public or private security network 1315. Advantageously, the network may include GDG 

5 1320. An exemplary security configuration can include a perimeter-based security 
architecture having filtering performed at the borders and more complex filtering 
performed at internal checkpoints, and including proper address assignment and 
packet/route filtering. 

Advantageously, addresses can be separated into two blocks of addresses for 

10 subscribers (customers) and new users, including a public address block for the 

customers and a private address block for the new users. Route filtering and packet 
filtering can be provided to protect the network from bogus entry and address-spoofing. 

For basic network access services (such as Internet access), the data 
communication server can perform dial-up authentication when the user connects to the 

15 server. PPP can be advantageously used to provide a plurality of in-protocol 

authentication methods. Preferably, a remote access dial-up user service (RADIUS) may 
be used to perform the dial-up authentication, allowing exchange of login information 
and user resource information between a client and a RADIUS server, the server 
containing a database. During an authentication session, the login information is sent to 

20 the RADIUS server, the user is authenticated, and the server returns the user data record 
provisioned in the database; such information may include the IP address assignment, the 
source and destination filter IDs, allowed access time, and other information. 



Additionally, another method can be used to protect the user data routed through 
the network, the method including use of a Pretty Good Privacy (PGP) protocol which 
includes encryption and digital signature. For PGP, a digital signature is first created by 
generating a hashing code of the data file to be sent and encrypting the code with the 

5 sender's private key . The digital signature is first verified by decrypting the hash code 
using the sender's public key and comparing it to the new hash code generated for the 
received data file. Confidentiality is provided by properly encrypting the data using a 
randomly created session key. The key is encrypted using the recipient's public key and 
prepended to the just-encrypted data file. The signature is prepended to the data file 

10 before encryption when a signature is used together with the data file. 

To decrypt the data file and to verify the signature, the recipient first decrypts the 
session key using the recipient's private key and uses the key to decrypt the encrypted 
block. Once the block is decrypted, the signature is verified using the process described 
previously. Using PGP, the data communication server can provide confidentiality of 

15 the data file and can classify the data file into different security levels by encrypting files 
with different public keys. Additionally, only authorized accounts/personnel can decrypt 
the message and using the digital signature ensures that the files come from the right 
applications or accounts, therein preventing forging of the document. 

Although the invention is described herein using the NATS network as a primary 

20 bearer service for an aircraft data communication service, it will be appreciated by those 
skilled in the art that modifications and changes may be made without departing from the 
spirit and scope of the present invention. As such, the method and apparatus described 
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herein may be equally applied to any bearer service providing data communication 
services from any moving object. 



